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CLAIMS 

What is claimed is: 

1 1 . A method of operating a first security module, the method comprising the acts 

2 of: 

3 detecting a second security module; 

4 determining whether a key associated with the second security module is available to 

5 the first security module; and 

6 obtaining the key associated with the second security module if the key associated 

7 with the second security module is not available to the first security module. 

1 2. The method set forth in claim 1, comprising the act of configuring the first 

2 security module to be a trusted platform module ("TPM"). 

1 3 . The method set forth in claim 1 , comprising the act of requesting the key from 

2 the second security module. 

1 4. The method set forth in claim 1 , comprising the act of sending a public key 

2 from the first security module to the second security module if the key associated with the 

3 second security module is not available to the first security module. 

1 5. The method set forth in claim 1, comprising the act of sending a public key 

2 along with validation information from the first security module to the second security 

3 module if the key associated with the second security module is not available to the first 

4 security module. 
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6. The method set forth in claim 1 , comprising the act of storing the key in a 
memory associated with the first security module. 



1 7. The method set forth in claim 1 , comprising the act of defining the key to be a 

2 private key. 

1 8. A security module, comprising: 

2 a detector that is adapted to detect another security module and determine 

3 whether one of a plurality of keys is associated with the other security module; and 

4 a device that obtains at least one key associated with the other security module 

5 if the one of the plurality of keys is not associated with the other security module. 

1 9. The security module set forth in claim 8, wherein the security module 

2 comprises a trusted platform module ("TPM"). 

1 10. The security module set forth in claim 8, wherein the security module is 

2 adapted to request the at least one key firom the other security module. 

1 11. The security module set forth in claim 8, wherein the security module is 

2 adapted to send a public key to the other security module if the at least one key is not 

3 available to the security module. 

1 12. The security module set forth in claim 8, wherein the security module is 

2 adapted to send a public key along with validation information to the other security module if 

3 the at least one key is not available to the security module. 
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1 


13. 


The security module set forth in claim 8, wherein the at least one key is a 


2 


private key. 




1 


14. 


A security module, comprising: 


2 


means 


for detecting another security module; 


3 


means 


for determining whether a key associated with the other security module is 


4 




available to the security module; and 


5 


means 


for obtaining the key associated with the other security module if the key 


6 




associated with the other security module is not available to the security 


7 




module. 



1 15, The security module set forth in claim 14, wherein the security module 

2 comprises a trusted platform module ("TPM"). 

1 16. The security module set forth in claim 14, wherein the security module is 

2 adapted to request the key from the other security module. 

1 17. The security module set forth in claim 14, wherein the security module is 

2 adapted to send a public key to the other security module if the key associated with the other 

3 security module is not available to the security module. 

1 18. The security module set forth in claim 14, wherein the security module is 

2 adapted to send a public key along with validation information to the other security module if 

3 the key associated with the other security module is not available to the security module. 
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1 1 9. The security module set forth in claim 1 4, wherein the security module is 

2 adapted to store the key in a memory associated with the security module. 

1 20. The security module set forth in claim 14, wherein the key comprises a private 

2 key. 

1 2 1 . A computer system comprising: 

2 a processor for executing program instructions; 

3 a storage device for storing program instructions to be delivered to the processor; 

4 at least one peripheral device that is controlled by the processor; and 

5 a first security module associated with the at least one peripheral device, the first 

6 security module comprising: 

7 a detector that is adapted to detect a second security module and determine 

8 whether one of a plurality of keys is associated with the second security 

9 module; and 

10 a device that obtains at least one key associated with the second security 

1 1 module if the one of the plurality of keys is not associated with the 

1 2 second security module. 

1 22. The computer system set forth in claim 2 1 , wherein the first security module 

2 comprises a trusted platform module ("TPM"). 
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23. The computer system set forth in claim 21, wherein the first security module is 
adapted to request the at least one key firom the second security module. 
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1 24. The computer system set forth in claim 21 , wherein the first security module is 

2 adapted to send a public key to the second security module if the at least one key is not 

3 available to the first security module. 

1 25. The computer system set forth in claim 21 , wherein the first security module is 

2 adapted to send a public key along with validation information to the second security module 

3 if flie at least one key is not available to the first security module. 

1 26. The computer system set forth in claim 21, wherein the at least one key is a 

2 private key. 

1 27. A method of unsealing information fi:om a plurality of security modules, the 

2 method comprising the acts of: 

3 detaching an identifier from sealed information for one of the plurality of security 

4 modules; 

5 decrypting the sealed information with a key that is associated with another of the 

6 plurality of security modules; 

7 calculating a hash of the decrypted sealed information; and 

8 comparing the calculated hash to the identifier to determine if the key was used to 

9 encrypt the sealed information. 

1 28. The method set forth in claim 27, wherein the plurality of security modules 

2 comprise trusted platform modules ("TPMs"). 
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1 29. The method set forth in claim 27, comprising the act of returning a decrypt key 

2 found message if the key is the key used to encrypt the sealed information. 

1 30. The method set forth in claim 27, comprising the act of returning a decrypt key 

2 not found message if the key is not the key used to encrypt the sealed information. 

1 3 1 . A computer network, comprising: 

2 a plurality of computer systems; 

3 a network infrastructure that connects the plurality of computer systems together; 

4 at least one of the plurality of computer systems comprising: 

5 a first security module being configured to: 

6 detect a second security module; 

7 determine whether a key associated with the second security module is 

8 available to the first security module; and 

9 obtain the key associated with the second security module if the key 

10 associated with the second security module is not available to 

11 the first security module. 

1 32. The computer network, as set forth in claim 3 1 , wherein the first security 

2 modules comprises a trusted platform module ("TPM"). 
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